An Entropy-Based Solution for Identifying Android Packers

doi:10.1109/ACCESS.2019.2901522

2019-01-01

Ngoc-Tu Chau

Souhwan Jung *

DOI：10.1109/ACCESS.2019.2901522

原文链接

查看原文

摘要

En 中文

By using wrapping techniques, malicious developers can build a packed app (or packer) to deceive the basic analysis layer and successfully publish it through Android's application distribution service (such as Google Play) before being detected by an in-depth analysis process. Although a thorough dynamic analysis can help in identifying packers, it is impossible to analyze mass numbers of apps in a short time. Regarding static analysis, most of the existing research on identifying packers depends on the signature of packers such as files or directories. In this paper, we propose a model for detecting packers through static analysis of various contents in an Android Package file. By applying entropy-based algorithms in conjunction with common classification solutions, our model can provide output about whether a target app has the potential to be a packer or not through prediction values. Compared with previous solutions with absolute results, the relative results could increase the likelihood of identifying variants from known packers. The results of our experiment have shown that our model can identify potential packers with high accuracy. Our proposed model can help improve the detection of potential packers as well as contribute new research directions for detecting packer by static analysis.

Keyword:

Machine learning

packer detection

entropy-based

AI总结

对已上传原文的论文进行重点信息的提取，主要内容包括：简要概述、研究摘要、背景介绍、关键亮点、图文解析、展望与总结。

期刊

IEEE Access

IF:

3.6

论文数:

9.8W

被引数:

29.4W

机构

Soongsil University

学者数:

3.4K

论文数: 3.5K

被引数: 3.2K

引用论文

Main results of the 2012 joint Norwegian–Russian expedition to the dumping sites of the nuclear submarine K-27 and solid radioactive waste in Stepovogo Fjord, Novaya Zemlya

Journal of Environmental Radioactivity

IF0

2016-01-01

PREAI

Justin P. Gwynn; Aleksander Nikitin; Viacheslav Shershakov; Hilde Elise Heldal; Bjørn Lind; Hans-Christian Teien; Ole Christian Lind; Rajdeep Singh Sidhu; Gunnar Bakke; Alexey Kazennov; Denis Grishin; Anastasia Fedorova; Oxana Blinova; Ingrid Sværen; Penny Lee Liebig; Brit Salbu; Cato Christian Wendell; Elisabeth Strålberg; Nailja Valetova; Galina Petrenko; Ivan Katrich; Igor Logoyda; Iolanda Osvath; Isabelle Levy; Jean Bartocci; Mai Khanh Pham; Adam Sam; Hartmut Nies; Anne Liv Rudjord

What are fuzzy rules and how to use them

FUZZY SETS AND SYSTEMS

IF2.7

1996-12-01

316

OAAI

Dubois, D; Prade, H

Effect of classifier selection, reference sample size, reference class distribution and scene heterogeneity in per-pixel classification accuracy using 26 Landsat sites

REMOTE SENSING OF ENVIRONMENT

IF11.4

2018-01-01

143